CVE-2020-10074

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link...

CVE-2020-10074

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link...

CVE-2020-10074

GitLab 10.1–12.8.1 is affected by an Incorrect Access Control vulnerability that could allow an account takeover via an expired link. Public details in the docs identify the affected ranges and the impact; remediation mentioned in the references is to upgrade to GitLab 12.8.2 (and newer). The ava...